$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: 0Knd1HDwJ3MDfAkzn1gSUrhIsGcIt069/YSVw7Suk+0= Subject key identifier: 56:29:4B:D1:26:C7:01:14:A5:E3:B4:40:71:12:E7:ED:2B:D4:67:0F Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: 010E Signing time: Sat 23 Aug 2025 05:04:15 +0000 Manifest this update: Sat 23 Aug 2025 05:04:14 +0000 Manifest next update: Sat 30 Aug 2025 05:04:14 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: Wr7gkgyYj5sGhTvSk2IotIGKmhV0T0ts0EO+/YpY7sQ=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: EfnXa4JTXRSQtpkoLm2l4ZqnMhuE0NVKwTVdEbOaaqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: Aug 23 05:04:14 2025 GMT Not After : Aug 30 05:04:14 2025 GMT Subject: CN=68a94bce-0fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0b:be:d1:17:10:02:30:5d:d0:29:72:fb:b3: 6c:3a:fc:0f:44:1c:1e:50:d8:a3:87:b9:14:57:68: bf:7c:b6:5e:47:f6:81:c5:89:23:cd:99:24:48:45: e6:5b:ff:bb:41:72:d4:46:d1:02:e1:d5:7a:17:f6: 15:97:06:06:34:67:70:d6:fc:0e:80:e2:42:26:9c: 00:18:c1:5e:c4:6c:53:84:01:f9:ea:b5:ee:e4:8b: 7a:4c:f0:0d:c6:62:e3:35:77:15:8b:37:46:59:b4: cf:5b:7c:be:4b:f0:d1:f5:ab:20:35:fa:fd:8b:6c: 00:04:2a:15:cb:72:d1:82:9f:6b:eb:8e:d3:fd:f6: 87:56:96:0a:dc:b6:0f:94:63:35:c3:5d:8e:c3:15: b3:bd:a4:77:d8:de:5c:e3:47:15:14:b5:13:44:5a: e1:32:19:97:09:c1:ab:ff:fb:7e:29:28:f5:d5:82: 6c:29:15:b7:93:c8:f8:1f:53:f2:40:1f:bb:b6:5c: c1:97:52:cb:86:76:70:cf:47:87:36:1e:68:b1:56: 2a:7c:53:55:e8:24:f0:92:d2:d6:f7:0a:4f:8e:81: 86:b1:f9:b5:31:b5:2b:fd:cb:e3:34:60:8c:0d:72: c7:2b:02:80:31:eb:5b:83:63:1c:6d:4d:ab:25:73: fb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:29:4B:D1:26:C7:01:14:A5:E3:B4:40:71:12:E7:ED:2B:D4:67:0F X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:11:1f:25:bb:af:3b:3c:de:66:9b:cc:bc:0b:50:49:f8:66: 95:fc:a8:70:4c:75:b5:d0:28:46:0b:0a:3c:18:e8:b2:38:c4: 37:31:a9:d9:ce:8e:e6:c3:9f:2c:04:8b:b3:15:cf:ac:2b:da: e0:ab:a4:07:b8:a2:77:35:73:e7:b5:cd:54:01:b7:af:d2:d6: 7b:a7:4e:e1:bf:4d:b5:89:e6:7d:f4:96:f0:79:7d:85:a2:62: 3f:35:65:8c:20:3b:14:ca:3c:03:ea:50:8d:04:44:0d:e5:43: a7:e0:35:18:70:56:43:8d:3f:46:2e:28:44:06:6a:29:c3:e3: 40:dc:8b:bf:48:37:0c:2c:c7:90:f9:ac:0b:54:ce:f1:57:fe: 58:a7:2e:dc:50:e7:f4:7a:a7:fb:fa:6b:5c:65:87:14:4a:1e: cb:61:82:1f:55:21:d0:05:30:fa:42:69:75:13:69:38:51:d9: 78:2c:65:59:6d:2a:80:1f:60:58:df:72:21:5c:d5:c4:70:4e: 5c:88:b3:a5:9c:68:ff:aa:77:be:5e:7c:f1:46:c8:19:0f:9a: 5f:b6:96:f3:23:85:6e:2c:cc:29:d8:54:0e:be:2c:73:ee:cb: d4:26:f4:23:6b:00:fa:0f:9f:05:e4:3a:d2:02:30:c6:70:7c: 52:7e:76:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUwODIzMDUwNDE0WhcNMjUwODMwMDUwNDE0WjAYMRYwFAYD VQQDEw02OGE5NGJjZS0wZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAu+0RcQAjBd0Cly+7NsOvwPRBweUNijh7kUV2i/fLZeR/aBxYkjzZkkSEXm W/+7QXLURtEC4dV6F/YVlwYGNGdw1vwOgOJCJpwAGMFexGxThAH56rXu5It6TPAN xmLjNXcVizdGWbTPW3y+S/DR9asgNfr9i2wABCoVy3LRgp9r647T/faHVpYK3LYP lGM1w12OwxWzvaR32N5c40cVFLUTRFrhMhmXCcGr//t+KSj11YJsKRW3k8j4H1Py QB+7tlzBl1LLhnZwz0eHNh5osVYqfFNV6CTwktLW9wpPjoGGsfm1MbUr/cvjNGCM DXLHKwKAMetbg2McbU2rJXP7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYpS9Em xwEUpeO0QHES5+0r1GcPMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDRC9COTdCNzYzOEUwMkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJj Skx1ZkpBOWM1VmJ0Z24taXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7ER8lu687PN5mm8y8C1BJ+GaV/KhwTHW10ChGCwo8GOiyOMQ3ManZ zo7mw58sBIuzFc+sK9rgq6QHuKJ3NXPntc1UAbev0tZ7p07hv021ieZ99JbweX2F omI/NWWMIDsUyjwD6lCNBEQN5UOn4DUYcFZDjT9GLihEBmopw+NA3Iu/SDcMLMeQ +awLVM7xV/5Ypy7cUOf0eqf7+mtcZYcUSh7LYYIfVSHQBTD6Qml1E2k4Udl4LGVZ bSqAH2BY33IhXNXEcE5ciLOlnGj/qne+XnzxRsgZD5pftpbzI4VuLMwp2FQOvixz 7svUJvQjawD6D58F5DrSAjDGcHxSfnZC -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:54 2025 by rpki-client